Re: Object Class Violation

Manuel Amador (Rudd-O) said:
> No, I don't think this will work, technically, the reason of which
> being
> that unneeded object classes sometimes cannot be added because they
> sometimes require some attributes to be present.  And sometimes
> attributes you want to fill will need an object class not present in
> your template.

GQ solves the problem of required attributes by displaying them in a
different color. Thus indicating to the user that they need to be
filled in to prevent an objectclass error. Attributes not part of the
templated ObjectClass don't appear in the attributes list.

> Thus you intend to move the responsibility of deciding which object
> class to go in an object to the user, when DA is actually in a much
> better position to determine the optimum array of needed object
> classes.

No offense, but this sounds arrogant to me. To my ear this sounds like
the software is smarter than the administrator at determining what
objectclasses are required. Granted, this is often the case, however
the assumption is flawed.

> This is something that needs to be determined on a case-per-case
> basis,
> with an algorithm that detects which object classes are needed, and
> automatically adjusts the object's OCs as corresponding, just as it is
> now.

How is an algorithm going to make this determiniation? Does the system
require both Samba authentication and Unix authentication? In my case
it does. Is a host attribute required? In my case, none is required.
Every time you try to second guess the administrator, you run into
these kinds of conflicts. What makes you, or your software, better
equiped to decide which attributes must be required?

> Either improve the algorithm (which is very, very simple actually) or
> find a way to use the host attribute without adding a conflicting
> object
> class, which is the real problem AFAIK.

Host attribute is unecessary in my enviroment, but you would choose to
force me to use it.

-- 
Neil Schneider                              pacneil_at_linuxgeek_dot_net
                                           http://www.paccomp.com
Key fingerprint = 67F0 E493 FCC0 0A8C 769B  8209 32D7 1DB1 8460 C47D
Secrecy, being an instrument of conspiracy, ought never to be the
system of a regular government.
- Jeremy Bentham, jurist and philosopher (1748-1832)